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^ -2-^^^ ^5) ^-§- o^-f-» :^^^H ^5] ^fl^o] ^^S]^, Als] ^1)^ ^iDl 

al- -i-^ ^^*>^ A-lti. Al^E^; ^11^ ^-g- cx^^ofl Cfltb ^1^*>^ 7j- 

^1^ (Mandatory Access Control, MAC) ^s] ^fl^ Al^i^oflA^ x\g\ ^fl^ 

^ ^^el -^^^s ^^^V^ ^fi^ o]-%-n sfl^^ ^1-^ efl^s. ^^*>c^ A>-§-;^Hl^l ^ 

r^^^S. ^:&5}-7> ^o] SXa^B-S. ^^^^ vfl^^ *s>ji. ifl-g-o.^ cfl 

IE 1 
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^^^]^ /^1<H7> ^-g- ^l;(lloi]Aio^ ^11^ ^1^ ^^1 ^ 13-^ {APPARATUS 

AND METHOD FOR PROVIDING TRUSTED CHANNEL IN SECURE OPERATING SYSTEMS WHICH ARE BY USING 
MANDATORY ACCESS CONTROL POLICY} 

(class, category)^ ^Sl^fl^S^ ^Huicfl cfltb ^-^^£.<>H, 

-£ 4^ ^ i4€- ^s]^B^ ^lluW ^-§-^ n^Ao\]^^ <a-:£5l-7> 2^-g-5]^ 3i))^o^ oj. 

H 5^ ^ ^^<H1 ^ll^ol ^-§-51^ ;g-f611 cfl^H S.^'-lt!: iE.^<^m. 

10, 10-1 : ^/^^^ i-ilH^^H 

12, 12-1 : ^/^^^ ^1]^ Al^Efl 

20 : MAC S-l- 30, 30-1 : ^"i. ^3.2] 
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SI : ^>-§-;^> S2 : 

A : 

^ ^1<H (Mandatory Access Control : MAC)7> ^-g-^ Jio]- o.^ ^^^^ 

'=>]°11 7l<a iflSl 7l^ ;^>S ^ 7ll«y ^] , ^-§-'^1 S.^ 

^:a.(<^ls, ^-g-^V:^ w]^ 7i]oi ^) ^^o^ ^^7} ^7}^}^ 

<=>]^. ^M'lt, (sniffing) ^ i^^(spoofing) sfl^ofl cfltt «fl^J 7]^ 

^^^^^ t:-!^ Dl ^7>sVJl 51^1-. 
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SHTTP(Secure HyperText Transfer Protocol), SSLCSecure Socket Layer) -§-2^ ^^^g**^! 
^31 9X^^, ^itilriioll ^^^o] ol-g-5]jL SZ'H tllH^qS ^^<^1 ^€ 

^^1 ^ -i-^ ^<y<^l ^.a-^m. 

<i6> sEt!-, tilH^^a -f-^<^l ;^]^*>^ 711^0.^^ vflH^H :^]%- # 91^"^ 

^■(internet protocol : IP) je.^'^^* ^1^*>^ IPSecClP Security) 7l#ol tfljt^^ 

^ ol-g-£]j7 oxv^^ o] 7]^^ 7}^ A>^°<J-(Virtual Private Network : VPN) ^]^^]3. 
6\]A] iL9l^^-i: ^]^^}7] ^S. ol-g-slD^, IPSec^ n^^^l-7l 71'^-i-ol IETF( Internet 

Engineering Task Force) RFCCRequest For Comments) ^^^S. JL^5|-Sl<H A>-g-:gT:^. 

<17> o]^, tflaa^ o.^ A>-g-E)^ IPSec tl^ ^^Icl (Authentication Header : 

AH)sl- 3)1 <^1SJB (Encapsulating Security Payload : ESP)7> 9X^^ . o]^ ^o]iE,]g:\ 

7]^^^ -a-^^l- ^R«^>^ w>S ESPol4. 

<18> AH^q- ESP 3.^ IPSec* <il-§-sr>7l ^^a-^^ vilH^JlB. :Sg|)^oii j^oj. A^al^s. 

^IJ-^ ^oj. o^:^l (Security Associations : SA) 7fl^* ^l€«fl<^> 

<19> n&lJl, IPSec<HlAl ;^l^s]^ sfl^ JS.^ cHolB^uflo] ^(Security Policy 

Database : SPD)<H1 7l^sfo^ SPD^ A>-g-;^>i4 ^1^^;^ ^&l^]-7> ^ 

-B-;^l*>7lt+, «^>M^ <^1«<^1 ^^^^ ^1^ *V«11 ^^s)^ <>1#al?flol>5dol1 

<20> o] 31] ^-1-^ SPD^ IPM- B^iiLH ^i^o\] 7]^^-c^ IPSec ^ 

oy A^w]^^ wl-TiM- ^l^lslTlM- IPSec* -fsl^V^ >Hl 7^ ^>u|-» ^i^^cf. 
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<22> n^^^ji?!:, IPSec ^2:^ ^fl-f 4^*>^ >^>-g-*>7l ^t!" "fl-^ ^}^^^] 

<^1. ^e^^V^ ^ ^B^7]- oi^oi;:^!^! ^^c^-ig IPSec<^l ^tb -a'?]:^^^ 

^c]^^ ^ ox^] s)T^, MAC ^e^lol7> ^-i-^ ^'^^l;^l<^l^i ^^-^l ^^^Vfe ^>-§- 

<23> ^ ^^^^ ^^^tt ^-^S-A^, MAC^ 

MAC^ ^9): <=>]'%-n vflH^^a ;^-1^>» ^:i^*>c^, ^51 ^fl^^l tH^* ^^1 

^-i- ^11^ ^ ^^^^ ^l^f-<^l Sin]-. 

<=>lti7}- 2})^ A^<a ^-f , i^lS.5]sq- MAC S-lr^-^Bl ^j:a.S.YE^ ^5] ^11^ ^ 

w. ^1]^ o^a.oil Af-g-^]- ^ov ^1^^>^ MAC 2.^; ^5] 

^11^ ^-§- *^-?-<Hl ^At!" ^s] 5flii ^-g- ^ti ^ 711- ofls. 

s]: ^^oflA^ viiH^s* 2fl^^ 43:^*>7l ^s] ^flW ^cl ^^o^ o] 
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# c-flojEi* ^A>*l-Ji, o]^ C-1101E-17V -^J:^>ia, 311^^ ^5] ^11^ 

'^l ^tlr ^^2^71- ^J-^ efl^^ ^^5^ ^^-^S. ^^s:>^ ^11* o]-g-5fl ^vo^ 

MAC 3L^3\. ^ise^l- ^^^H <^Y» ^133^1-^ ;^ll ^]3. ^iH 

Als) ^fl^c] :^ x]g^ Al^Ej^ ^-§-3^)^ 

5)^ ^ ^oy ;^^(class, category)!- ;^^^srl-fe ^Sl^fl^s] T^^^^Vfe 

^^1; ^^^11^ n^^^ ^^jtb ^, ^^^^ ^sl^fl^ «^li:-1<^lAi oj-j-^^ 3i||^ofl cfltb t-llol 
^ ^ 'a-^^ofl 3,7] ajE-ll- ;tfl5qt!- M-T^^l ^Jis^-tl- ^, 211^ ^ ^ 

^11^ ^11=1 ^ ^^<^1 cfl^ IP Tllf^Sl 31]^ uj-T^^l «-^ol (checksum) ^ 

^1^*>^ vilB^^Sl- ^Alxg jrfl^o,] cfltfl ^Ai^ IP ;^i*o^ 311^ 

Als] ^1)1^ ^jcl a-^o^ ol^ C-llolE-lS ^^■S}JL, o]^ C-il<5lEi7l- -B-Jl*>^, 
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o^^ -f-^o.^ ^^^m ^fi^ efl^S. ^^sH ^>-§-^H^l 

<26> ol^>, ^2:3H ^ ^^^<H1 ^^^>7l^ 

<27> £ 1^ ^ ^t^oll ^]^7} o.^ ^1 ol] a-^ ^fl ^ 

^ ^^Hl 1:^ vilH^s A-^w. Al^E^Cio, 10-1)31-, MAC 3.^(20)3^, 9]^ 
^]S.^i30, 30-l)# 5L^t!:^-. 

<28> vilB^^lH Al>iEfl(10, 10-1)^ MlH^^S 7l^^ ^^*V^ n 

# VilE^^a A-^y. Al^Bfl(lO)^ 1^-^^^ O.^ 5lfl^^ "a-^Sl-l- ^^e>^ i^fl^ A^ti. Al:iE^ 

(12)^ ^W1S^>T^, ^B^^H -Hje. Al^Ej(lO-l)^ 5J|1^S| ^^^>^ ^11^ ^1 

^^^(12-1)^ ^«ltbcl-. 

<29> 4.AI ^^oflA-^O^ A]5l ^11^ A^B AliE^(12)^ VilB^^H n=^S:>^ 

^€ ^-f'Hlfe IP 7ll#s] #^ ^^^1-31. 2fl^ #^ ^el7> #\+ 

5^^1-7] ^o]] Ais] ^1]^, ^ <y-^5l- ^-§- ^-^1- ^7l ^«fl tS^ ^la.el(30)s}- MAC S.#(20) 
^ ^A^^H ^11^ ^-g- ^^W. 

<30> Alsl ^11^ ^1^^^(12)^ ^ll^ol ;g o.^ ^U^ofl cfl^l. o.;^] 

^>7i ^fl^ ^ic^i- :^A^^i.^c-i], Aisi ^11^ ^^^^ ^j^^ 
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sfltg :^o] <^^, ^^]o^ MAC ^^B^F7l ^SflA^ ^o}- * ^tfl^el 

^ 5.^-2-0^, Sfl^o^ <a-S2)-t!: ^. n^A^ ^^^^ ^«fl -^l^ ^S^^^}JL 

^>-§-:^>7> MAC 7M ^■^^]^. ^] n, ^-s- Ji^H ^ 

^ °flS.5](30)S-¥-t^, MAC ^9} MAC 2.1:(20)^-^Bl <a-^i^ . ^^-^^^ ^11^^ ^lc1<^l^ 

<3i> oi^, Alsl Al^^^(l2)^ IP sflei ^^el, ^ 3ll^<Hl cfltt ^13 ^ 

(checksum) ^ ^^sl» ^>J1 vi]H^^3.(A)* -f-Sfl eil^t^ #^ afl^ 

<32> MAC Sl-(20)^ €^ ^l^«^>7l ^S] Ais] ^ o].^s|- <i^«.ofl cflt!- ^ 

^^>^]^S.S. ^e^>3£^ ^]^*>^. T^lSelOO)^ ^fl^ A^a. Al>hE5(12)^S^Bl 

<33> *V^, ^A] ^TgoflA-^o^ Aisl ^11^ ^i-a AliE^(i2-l)^ vil:E^^^(A)# ^*fl ^A]^ 5)]^ 

^1]^ ^-g- :^^o.^«.El ^5] ^11^ c^^^ ^^t^cf. 

<34> ^fl^ ^\^mi2-l)^ ^5] ^11^ ^-g-, ^ 3ll^o] o^j:5i-i^$i^ 

^S.S\:^7] ^o\] Als] ^fl^i ^IC] ^^S^ tl^ tflolE^S ^^S^-Jl, -^I^ t-ll<>lHi7> -H" JL^V^ . ^ 
^ 5ifl^^ 4^^ar>^ '?l^cflolEl7> -B-Jlb^>^1 Tgo. ^^^^ tHflcf. 
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<35> o]:^^ Ais] ^fli^ A^H. Al>^E^(i2-i)^ Sflt^ 31]^^ ^S^tb ^, ell^iollAio^ 

^^^S. ^^^>^ ^E^o. o]^^ >;^v^ eflig^ ^^*V<^ E^lt'^l 

<36> ^1S5^(30-1)^ 3xfl^o] ol# ^ 91^, 7]-!- 

<37> i 2^ ^2:*>^Ai, ^^^^ «>^-^S.. ^ ^^<H1 ^^^]^ 

<H7> ^-§-^ ^ov -^-g- ^l^lollA-^o^ AlSl ^11^ ^1^ i:fl^l-<^ >a-/^l^>7fl 

201). 

<39> ^1-71 c]-;^l(201)o1lAi tll<^lBi7> ^ , Cilolt)7> ;^l^£]^^ll- :&^(201) 

<40> a>^<Hl, ^T-7l ^cl- c]-;^l(201)«Hl>H CllolBl7> ^Hl^S]^, ^5) ^1)^ A^H. X\^S^(^12)^ ^] 

^-g- «^-?-* -^Itfl Dfl2.e|(30)^ MAC S.l:(20)* ^^*><:^ ^1 

3.^cf(^7fl 202). 
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<41> s., X\g\ 5fl^ ^^ o^«.^ ^^*>^ tfl-g-<^ll cfl^H ^'^^V^, ^ 4^ 

203). 

<42> >a-7l ^IH ^^l(203)«^l^i ^-f , IP ^ -^^Ol;^] 

Mr M-E}ufl^ :g^7> ^S] ^u^^ ufB^-tfl^^l§ ^ A>t!:t:1-(cf7ll 204). -^M ^711(204) 

^^7> ^1)^ l4HfifliS, ^5] ^fl^^ ^-g-tbm^^l 205). ;aA> 

^;^l(204)<HlAi ^^7> ^1]^ uj-Efifl^l ^51 ^11^^ ^-§-*W 

206). 

<43> ^V7l ^13. ^>^l(203)<^lAi 311^ ^^"^^ n^A'^] ^^^^ ^^^1 ^^1- ^^m<^ 

M.^^] ^4i7]- Ais] ai-g- 5:>iEoi;;^i=. 207). ^5] ^-§- t-ilH 

<44> ol^, 5^9^! X\6\] ^-§-# ^>^17> Sfl^Sl ^^5^- ?1 1^ 

ofl£Bl(30)«^l ^■l^Sl'H ^fe ^^Sq- ^V^lcfl^ tiliHsl-^A^ Sfl^o^ ^dl7> ^ 

-g-^Vi^ ^d^ijcH 01^ ^>i.oi^]^ ^^^^mc-il. sifl^o^ ^dt7> ^51^1)^^ ^>-§-^m 

^]^^'U ^-f. -asi^fl^ ^-g-^ ^:^o] s\o] ^Ai^ ja.^^ ^x\^. A>^>^HSi)7> 



O 1=3 



7>^1J1 ^AVtbcl-C^^l 208) 



^-§-*w ^^cf(^;Ni 210). 
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<46> ^7] ^7^1(208)ollAi ^oy 7l.^]j7 ^O^D^, S.^^] ^^7^ ^d^l^H^^ Af^^V 

^ Al>,Efl<^ Ais] ^11^^ ^-§-t!:Cf(^7jl 209). <=^7]^^ , -bl^l^fl^o] ^.g-^ ;g-o^ ^^g;,^ 

oflA-l Al5l^fl^ol ^-g-^ 5fl^ol^] <i>\i^l» ^7> ^^^], ^7] ^A} 

(208)<^]^i 7>^lJi ^5] ^1)^^ ^-g-^V^l ^^^i^n 210). 

<47> ^7] ^13 ^;^l(202)ofl^i ^S) ^fl^o] , Als) i^fl^ A-^ti. Alie^(i2)^ £ 3 

^] w>5»i- :y-o], x\g\ ^fl^^ ^^^l-igA^ ^ ^>-§-;^>si ^:e.(ciass, 

category)!- ;^-l^^>^ ^Sj^fl^^ ^v^^: ^^^tb^^^l 211). 
<48> ^, Ais] ^11^ ^lui ^A^^ A]s] ^11^^ ;^l^s:>^ IPSec<Hl^i ^>-g-s1fe ^1 

^^^V ^^^C-fl, ^e^H^ ^^S]7l nfl^oll i-i]Eo^3 

36bytes(288bit) 3.71* 7}^]^, ^^^^ T^^^s^V^ ^:E.1-S.^ S. 3* ^S^}-^ , <a-Ji 

5|-tb c-fl<^lEl<^1 tfltb 7>;^1^ 128-bit"?!^ n<^]B\ ^.E.(Authentication data). 

5|- ^J1^^#S^ ^J:*}-^ -^71^ c^lojBlS. >^>-g-5l^ 64-bit ^7l ^B] ^.^( Initial Vector), 
IP^ M-B}vfl^ 8-bit ^Ic] €:E.(Next_hdr). ^5]^fl^ ^]t:^b\ ^ 

^ ^^11- a^1^r>^ 4-bit ^^^fl^ ^o] ^^(TCHLEN), 'a-^5l-^>7l Aj-g-^ bD^^ 

Si «>olE ci-o] ;gol^ a>-l*>^ 4-bit afltg :g:=(PLEN), ^}-%-7^^ MAC ^ 

^» S^l^V^ 16-bit M.^} ^^(MAC class). 64-bit category ^^(MAC category)^ ^ 
^i^^ 9X^. ^7] ^B\s] ^o]^ oj-j^^ <y:Jielf^o^ <y-j^^ ci-o^oii n^e:). ^^g^H 4^ 
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<49> s. 4^ ^M7} ^-§-^ ^:£5|-7> ^-§-5]^ n^A^ 

sfl^bil cfltb tfl^lEl ^ ^^#<^1 ;^ls>i^ q-Dix] 

^^^^ 3.^ <a-^3|-t!: ^(^^1 212), ^^A^ ^ ^sfl ^m^}JL 

^^^» ^lD]oil ^i^J-*)-c^-(cf^l 213). 

<50> O]:^^ X\g\ ^1)^ A-lti. Al^E^(l2)^ IP #^ ^^E], ^ 3^11^011 cfltV 

(checksum) ^ ^^sj- ^s]» *>ji vfljE^^^CA)!- ^tfl #^ ^€-2.5. sxfl^ii 

# ^1)^ Al^Efl(i2-i)cil ^Hl^^cfC^;^! 214). 

<5i> tii-igofl, Aj.7i ^7jl(202)«HlAi Aisl ^11^*^1 ^-g-Sl^l 214^E-1 

<52> ^Sl ^11^ A^ti. Al^tJ(i2-l)^ vilH^^5L(A)« rfl^ ^Bl. 

^o_s, ^^A^ ^^^1-71 ^ofl ^li:-!^ ^1]^ ^-g- Ais] ^11^ ^-g- o^-^l- 

^^t!:i=l-(^^1 215). 

<53> ^7ll(215)<^lAi ^)|^ ^ Bfleiol oJ-^Sl-Sl^^ ^-f . Sfl^^ 

^oil Ais] ^fl^ ^ic-l -^^o^ oi^ t-llolE-il- :gA].t!:T=f(^7ll 216). 

<54> >a-7l ci.7|l(216)oflX>^ o]^ C|lolE^7> -B- JL^V^ , ^SSj-^fjlC^;^! 218), 

-B-Jl^W ^o.!^ Sfl'^ Bl^m^^l 217). 
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tg- 211^^ u}s. 51]^^ ^^^^"y ^^el7> o]^c>i^i£^ t!:i=+(^^l 

219). 

91 ^5] ^fl^ ^jci ^ 3111^0^ ^o] ^ efl'iollA-l ^-iel^o) 

^^^Hl^i ^]y^o^ -^^-^S. ol-§-«ll efl'is ^^^} 

219). 

<57> #J12^0.^, £ 51- ^l-S^m, ^11 ^O] ^-g-S]^ ;^^oll cfl^Vo^ H^O.SAi, 

^ ^^*>^ Alsl^fl^o] ^-g.^ Al^e^ iflo^ iioj. -^o. A>-g-^l-7> Al 

<59> s. 5c^ ^5]^l]^oi Al^E^l-^o^ -f-^J* ^>-§-^l-7l- 

ol ^-^o]^. S. 5d^ -ysJ^M'^l ^-g-€ ^1^^^ tL9}: 7]-^ >^>-§-^>7> 

c^aV Al>htj5zj-o^ ^Al^ ^-fojc^, i 5f^ ^HV Al^EfloflAio) A}-g-;^>7> Alsj^fl^o] ^ 

-g-^ Al^^3|.fil ^Ai^ ^-f^-^l. S. 5c, JE 5d. E. 5e, 5f<Hl cfl^^i^ ^^l^fl^o] ^ 
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i4€r vilH^a ^-l^l-* ^^^^ ^ ^<^lcf, 

^s] 511^ 7l^* 3)]^ #oi] ^v^^ol ^^^^ «?l«fl 7>^^fl7l ^*>Dle}-i 

^^^7> £)o1 $iO.^S ^^5]^ ellolE-lo^ vfl-g-^ ^*>J1, o^-^^^ ifl-i-^S. rJi\M]S\Xi\ 

^ ^ Si-^D^. ^^t!: ^^321- n^-^ ;^-l*>» ^^^^ ^ 7J-;H1^ 

^ SL^^ ^^^^-i: ^cf. StJr ^}n]7} :a-W7l ^^<^] ^7}s\^ n 

3.7] at}- 36-bytesS H^l ^^^^ , -f-^^ ^^^>^ >^>-g-;^>^ J^tb ^ 
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[^^^^^^] 
l^i^^^ 11 

^-§- ^Hl^l^flA-lo^ Als) ^11^ ^V^lofl $X<^A^, 

Ais) A^ti. 

^71 Ais] ^1)^ W.01] cHt!: ^}-g-;^> MAC ^M-M: ^l^^V^ MAC S.^; 

^7] Alsl ^11^ ^-§- ^11^ ^-g- ^^5)- ^ 

cflojEi A^Ajoi] oj-^^ ^#^11- ;^l^«>fe ^l£Bl; 
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^•%r^ ^-§- ^l^loflAis^ ^11^ ^il^g. 

2] 

[^^*^ 31 

^1 1 ^J-^Hl 9X^^^, 

^11^ ^^i^ Aj-7i Afl^Tfl ^M^^ ^^S., ^7] Afl^Tfl 
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[%^^*^ 4] 

^71 Afll-Tll ^S^^^ ^1C17> ^7}^v;\B^S. ^]m^]3. A^til^^l- ^^^t}^] ^:^o_ 

s. ^]<^7} ^-g- ^i^Hi>*>-i^ 

I^^lJ- 5] 

^1 1 ^1 3 SZ'HA^, 

5fl^ ^1-^1. 
[^^¥^1- 6] 

A^y. Al:^iEflo. ^^^^ CllolEl7V 3fl ^ <Hl *fl^S]^. 0]E^^^ HS£#(IP) ^If^^^ 3l|l ^ 

^^^>^. ^11^ ^-g- «y:7l >^7l ^Ai^ MAC 3.^^- 7]^ Dflae^ 

» ^-^^H 2i-§- o^-^» ^11 ^]3. ^:^]; 

^7] m ^IH ^;^l<^l^i ^^o] ^-g.^ ^v^l 5,1^ ^^y^ ^^^t^ 

^ ^ >^>-§-^>^ ^:a(class, category)* ^1^*V^ ^ 

^^^^^ ^^i; 
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^y] ^^n^i. ^^^^ ^, ^^^^ ^^^<^]^ <y-:£5}-€ ^^^^i 

t!: 91^ ^ ^-S-t!- 2:71 «i}Eii- 2.^1- ^J-^sj-t!- ^. ^ 
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